Business associate

Also written: business associates

A company that handles PHI on behalf of a HIPAA covered entity, such as a billing service or a cloud provider that hosts a clinic's records. It must protect PHI too.